Westpac fraud claims untrue

By Patrick Gray
27 March 2003 06:10 PM
Tags: fraudster, online, security, westpac, banking, gray, patrick, site
Reports suggesting the Westpac bank Web site had been "hijacked" by an overseas "nuisance site" appear to be unsubstantiated.

The confusion started after an e-mail began circulating which suggested that fraudsters had put a fake Westpac site online in order to purloin customer's online banking passwords.

"These fraudsters are telling customers they have to log on and change their pins and passwords. Last week they hit the CBA and they have now started on Westpac," it said.

The confusion arises from a non-Westpac owned page registered at www.westpac-bank.com.

"Go to www.westpac-bank.com, you will have to wait a few seconds while they pretend to divert you to westpac.com.au but they actually don't," the email said.

The confusion seems to have stemmed from the fact that after the Web site did in fact divert to the www.westpac.com.au Web site, the person who had coded the non-Westpac page used HTML tags that resulted the original www.westpac-bank.com domain name being preserved in the address bar of any browser.

ZDNet Australia examined the HTML source of the "menace" site and found nothing suspicious in it whatsoever. The line of HTML source code below shows beyond any doubt that as of 5pm Thursday, when the source was captured, the redirection was indeed occurring.

<meta http-equiv="refresh" content="5"; url=http://www.Westpac.com.au" >;

Furthermore, all "fake" Westpac pages were being served directly from Westpac themselves, which was news to them. This is easily verified by right clicking on the site's main page, selecting "properties" and looking at the "address" field.

A spokeswoman for Westpac told ZDNet Australia the company still believed the site was in fact serving up a duplicate of the real Westpac site.

Widely circulated and sensational reports seem to have originated from a technical misunderstanding.

"A prank website, apparently operating on an Internet Service Provider located in the United States, provides an exact replica of the real Westpac site," reports have said.

As of 5pm Thursday, this was incorrect.

According to the bank, at no stage was any Westpac information at risk, even if passwords were indeed entered after a redirection from www.westpac-bank.com.

The bank said it is trying to have the site taken down.

"The bank has taken action to have the site shut down via the Australian Federal Police," it said in a statement.

The Australian Federal Police were unable to comment at the time of writing and were thus unable to clarify which law, if any, has been broken by the owners of the westpac-bank.com domain.

Advertisement

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • David Braue Can not-so-smart meters help the NBN?
    It was interesting to witness Conroy's recent enthusiasm to spruik the NBN's role in supporting the Smart Grid, Smart City initiative. What a pity that Conroy hadn't yet seen the damning report from the Victorian auditor-general about that state's smart-meter roll-out.
  • Array Can the Telco Reform Act be win-win?
    In the second of our two programs looking at the Senate Inquiry into the Telecommunications Legislation Amendment Bill, we hear from shareholders, bureaucrats and industry groups.
  • Array Has New Zealand's smiling assassin delivered?
    One year into its tenure, how has the new New Zealand Government performed on issues of technology and telecommunications?
  • More blogs »

Tags

Back to top

Featured